[caskance]

One of the flaws about talking with an overloaded term like "security". If even abstractly, something does not work, what's the point of arguing about its technical details?

As you said before, DNSSEC is fine if you concede .com to the US government. This has already happened, we're just putting it in writing.

[tptacek]

No, we have not already conceded TLS keys for sites in .COM to the USG.

[caskance]

Instead, the current CA system means we've conceded all TLS.